Legal & Compliance

Sumup

Are you passionate about making an impact through technology and controls? At SumUp, we’re looking for an IT Internal Auditor to strengthen our Internal Audit team in Berlin. In this role, you’ll help ensure our IT environment is secure, compliant, and ready to support millions of businesses worldwide. ABOUT SUMUP SumUp is a leading global fintech company committed to leveling the playing field for small businesses. Since 2012, we’ve been a trusted partner for over 4 million merchants in 36 markets worldwide. Our mission is to make business simple and affordable by providing tools that help entrepreneurs get paid, manage finances, and grow their customer relationships. TEAM DESCRIPTION You’ll be part of our Internal Audit team, reporting directly to the Global Head of Internal Audit. The team plays a crucial role in safeguarding SumUp’s operations, ensuring compliance with regulatory requirements, and driving continuous improvement across the business. This role focuses on strengthening our IT audit capabilities— an essential part of our audit plan and risk management strategy. WHAT YOU’LL DO * Lead and execute IT-focused internal audits, ensuring that SumUp’s systems and controls meet regulatory and business requirements * Uncover insights and improve audit efficiency by analysing data: run queries, extract information from systems, and apply advanced analytics * Develop a focused IT audit plan, shaping how we evaluate technology risks across the company * Translate findings into clear, actionable recommendations and present them with confidence to management and stakeholders * Act as an independent voice for control and compliance, building trust while navigating resistance and influencing change * Build strong relationships with stakeholders to foster a culture of proactive internal controls * Stay ahead of the curve by keeping up with evolving IT standards, regulations, and best practices * Conduct targeted audits of AWS security standards and access controls across our cloud environment, ensuring credit card data stored in cloud services is adequately protected; * Perform risk-based reviews of payment products and ensure security requirements are consistently embedded throughout the development lifecycle. * Identifying anomalies or excessive privileges across different systems and payment platforms. YOU’LL BE GREAT FOR THIS ROLE IF * You have at least 4 years of internal audit experience within a regulated financial services environment. * You bring proven IT auditing expertise and strong knowledge of audit standards and risk management. * You are experienced with IT general controls, compliance, governance, and security frameworks (e.g. COBIT, ISO 27001, PCI DSS, ITIL, NIST, LGPD, GDPR). * You have advanced data analytics skills and can leverage them in your audit work. * You communicate clearly in English and are skilled in writing impactful reports. * You are ethical, independent, and confident in influencing change across different levels of the organisation. Nice to have: Professional certifications such as CIA, CISA, CPA, CISSP, CISM, or CRISC; knowledge of data analytics tools. WHY YOU SHOULD JOIN SUMUP 🌎 Opportunity to work with SumUppers globally on large-scale fintech products used by millions of businesses worldwide, from our Berlin office. This involves an office-first setup 🌈 Commitment to Diversity and Inclusion: be part of a workplace that values and promotes diversity, fostering an inclusive environment where everyone's perspectives are respected and embraced 🚀 Enrolment onto our Virtual Stock Option programme: you will own a stake in SumUp’s future success 📚 A dedicated annual L&D budget of €2000 for attending conferences and/or advancing your career through further education 💶 A corporate pension scheme where we match up to 20% of your contributions 🏖️ Generous time off: enjoy 28 days of paid leave plus public holidays and special leave days 🚵🏾‍♂️ Numerous other benefits such as Urban Sports Club subsidy, Kita placement assistance, subsidised office lunches 🌴 Break4me: 1-month sabbatical after 3 years of service 🔗 Referral Bonus: earn additional rewards by referring talented individuals to join the SumUp team About SumUp We believe in the everyday hero.   Small business owners are at the heart of all we do, so we create powerful, easy-to-use financial solutions to help them run their businesses. With a founder’s mentality and a 'team-first’ attitude, our diverse teams across Europe, South America, Australia and the United States work together to ensure that the small business owners we partner with can be successful doing what they love.    SumUp is an Equal Employment Opportunity employer that proudly pursues and hires a diverse workforce. SumUp does not make hiring or employment decisions on the basis of race, colour, religion or religious belief, ethnic or national origin, nationality, sex, gender, gender identity, sexual orientation, disability, age or any other basis protected by applicable laws or prohibited by company policy. SumUp also strives for a healthy and safe workplace and strictly prohibits harassment of any kind.   SumUp will not accept unsolicited resumes from any source other than directly from a candidate.  Job Application Tip We recognise that candidates feel they need to meet 100% of the job criteria in order to apply for a job. Please note that this is only a guide. If you don’t tick every box, it’s ok too because it means you have room to learn and develop your career at SumUp.

Sumup

ABOUT SUMUP We believe in the everyday hero. Those who have the courage to follow their passion and who have the strength and determination to realise their dreams. Small business owners are at the heart of all we do, so we're creating powerful, easy-to-use financial solutions to help them run their businesses. With a founder’s mentality and a team-first attitude, our diverse teams across Europe, South America and the United States work together to ensure that small business owners can be successful doing what they love. 🌍 YOUR TEAM You’ll join SumUp’s Global Internal Audit team, part of our wider G&A / GRC function, reporting directly to the Global Head of Internal Audit. This team plays a critical role in protecting SumUp’s integrity, supporting regulatory compliance, and strengthening trust with our Board, Audit Committee, and regulators. As our Internal Auditor - IT security specialist,  you’ll bring essential technology and data analytics expertise into a team that partners closely with senior leaders across the business. You’ll be the go-to expert for technology-focused audits, helping shape how we assess IT risks, controls, and governance across a fast-scaling global fintech. 🔍 WHAT YOU’LL DO As an IT Internal Auditor, you’ll support the delivery of SumUp’s approved Internal Audit Plan, with a strong focus on technology, data, and systems risk. In this role, you will: * Plan and execute IT internal audits in line with the annual audit plan * Assess IT general controls, security, governance, and risk management frameworks * Prepare clear, insightful audit reports, presenting findings and recommendations to senior stakeholders * Use data analytics to improve audit efficiency, sample testing, and risk identification * Support ad-hoc audit projects and regulatory-related reviews * Contribute to the continuous improvement of internal audit methodologies, frameworks, and templates * Stay up to date with technology standards, regulatory developments, and industry best practices * Build strong relationships across the business and promote a proactive internal controls culture * Conduct targeted audits of AWS security standards and access controls across our cloud environment, ensuring credit card data stored in cloud services is adequately protected; * Perform risk-based reviews of payment products and ensure security requirements are consistently embedded throughout the development lifecycle. * Identifying anomalies or excessive privileges across different systems and payment platforms. ✅ YOU’LL BE GREAT FOR THIS ROLE IF You’re a hands-on IT auditor who enjoys combining technical depth with clear communication and stakeholder collaboration. Must-have experience: * Minimum 4 years’ experience in IT / Internal Audit within a regulated financial services environment * Strong knowledge of audit standards, risk management, and internal controls * Experience auditing IT controls and frameworks such as COBIT, ISO 27001, PCI DSS, ITIL, NIST, GDPR * Practical exposure to areas like data security, cloud architecture, disaster recovery, security operations, or network infrastructure * Advanced data analytics skills * Professional-level English (written and spoken) Nice to have: * Professional certifications such as CIA, CISA, CPA * Additional IT/security certifications (CISSP, CISM, CRISC, ISO 22301, or similar) * Experience with audit-related data analytics tools What sets you apart: * High ethical standards and integrity * Strong analytical and problem-solving mindset * Confidence influencing change and challenging the status quo constructively * Ability to work independently in a multinational environment ---------------------------------------------------------------------------------------------------------------------------------- 💚 WHY YOU SHOULD JOIN SUMUP 🇬🇧 LONDON, UNITED KINGDOM 🌎 Opportunity to work with a truly global, multicultural team from our central Covent Garden location, wrapped in historic charm and modern flair. This involves an office-first setup 🌈 Commitment to Diversity and Inclusion: be part of a workplace that values and promotes diversity, fostering an inclusive environment where everyone's perspectives are respected and embraced 🚀 Enrolment onto our VSOP program: you will own a stake in SumUp’s future success 🏖 Generous time off: enjoy 28 days of paid leave, plus bank holidays and special leaves 🏥 Health matters: Vitality health cover, including optical and dental 🚗 Life made easier: salary-sacrifice commuter benefits via Gogeta 💼 Financial security: retirement scheme (SumUp matches 7% when you contribute 5%) 🛡 Peace of mind: life insurance from MetLife for 2× your salary 🌴 Break4me: 1-month sabbatical after 3 years of service 🔗 Referral Bonus: earn additional rewards by referring talented individuals to join the SumUp team Job Application Tip We recognise that candidates feel they need to meet 100% of the job criteria in order to apply for a job. Please note that this is only a guide. If you don’t tick every box, it’s ok too because it means you have room to learn and develop your career at SumUp.

Sumup

Are you passionate about making an impact through technology and controls? At SumUp, we’re looking for an IT Internal Auditor to strengthen our Internal Audit team in Berlin. In this role, you’ll help ensure our IT environment is secure, compliant, and ready to support millions of businesses worldwide.   ABOUT SUMUP SumUp is a leading global fintech company committed to leveling the playing field for small businesses. Since 2012, we’ve been a trusted partner for over 4 million merchants in 36 markets worldwide. Our mission is to make business simple and affordable by providing tools that help entrepreneurs get paid, manage finances, and grow their customer relationships.   TEAM DESCRIPTION You’ll be part of our Internal Audit team, reporting directly to the Global Head of Internal Audit. The team plays a crucial role in safeguarding SumUp’s operations, ensuring compliance with regulatory requirements, and driving continuous improvement across the business. This role focuses on strengthening our IT audit capabilities— an essential part of our audit plan and risk management strategy.   WHAT YOU’LL DO * Lead and execute IT-focused internal audits, ensuring that SumUp’s systems and controls meet regulatory and business requirements * Uncover insights and improve audit efficiency by analysing data: run queries, extract information from systems, and apply advanced analytics * Develop a focused IT audit plan, shaping how we evaluate technology risks across the company * Translate findings into clear, actionable recommendations and present them with confidence to management and stakeholders * Act as an independent voice for control and compliance, building trust while navigating resistance and influencing change * Build strong relationships with stakeholders to foster a culture of proactive internal controls * Stay ahead of the curve by keeping up with evolving IT standards, regulations, and best practices   YOU’LL BE GREAT FOR THIS ROLE IF * You have at least 4 years of internal audit experience within a regulated financial services environment. * You bring proven IT auditing expertise and strong knowledge of audit standards and risk management. * You are experienced with IT general controls, compliance, governance, and security frameworks (e.g. COBIT, ISO 27001, PCI DSS, ITIL, NIST, LGPD, GDPR). * You have advanced data analytics skills and can leverage them in your audit work. * You communicate clearly in English and are skilled in writing impactful reports. * You are ethical, independent, and confident in influencing change across different levels of the organisation. Nice to have: Professional certifications such as CIA, CISA, CPA, CISSP, CISM, or CRISC; knowledge of data analytics tools.   WHY YOU SHOULD JOIN SUMUP 🌎 Opportunity to work with SumUppers globally on large-scale fintech products used by millions of businesses worldwide, from our Berlin office. This involves an office-first setup 🌈 Commitment to Diversity and Inclusion: be part of a workplace that values and promotes diversity, fostering an inclusive environment where everyone's perspectives are respected and embraced 🚀 Enrolment onto our Virtual Stock Option programme: you will own a stake in SumUp’s future success 📚 A dedicated annual L&D budget of €2000 for attending conferences and/or advancing your career through further education 💶 A corporate pension scheme where we match up to 20% of your contributions 🏖️ Generous time off: enjoy 28 days of paid leave plus public holidays and special leave days 🚵🏾‍♂️ Numerous other benefits such as Urban Sports Club subsidy, Kita placement assistance, subsidised office lunches 🌴 Break4me: 1-month sabbatical after 3 years of service 🔗 Referral Bonus: earn additional rewards by referring talented individuals to join the SumUp team   About SumUp   We believe in the everyday hero.   Small business owners are at the heart of all we do, so we create powerful, easy-to-use financial solutions to help them run their businesses. With a founder’s mentality and a 'team-first’ attitude, our diverse teams across Europe, South America, Australia and the United States work together to ensure that the small business owners we partner with can be successful doing what they love.    SumUp is an Equal Employment Opportunity employer that proudly pursues and hires a diverse workforce. SumUp does not make hiring or employment decisions on the basis of race, colour, religion or religious belief, ethnic or national origin, nationality, sex, gender, gender identity, sexual orientation, disability, age or any other basis protected by applicable laws or prohibited by company policy. SumUp also strives for a healthy and safe workplace and strictly prohibits harassment of any kind.   SumUp will not accept unsolicited resumes from any source other than directly from a candidate.  Job Application Tip We recognise that candidates feel they need to meet 100% of the job criteria in order to apply for a job. Please note that this is only a guide. If you don’t tick every box, it’s ok too because it means you have room to learn and develop your career at SumUp.

Sumup

IT CONTROLS SPECIALIST Take a look inside our London office ABOUT THE TEAM SumUp's Internal Controls function sits at the heart of our financial governance, responsible for the programmes that give regulators, auditors, and leadership confidence in how we operate. As SumUp grows, robust and scalable technology controls are increasingly important to the strength of our financial governance and wider control environment. .  This is a newly created role, and it's a genuinely important one. You will take ownership of the technology side of our ICFR and Provision 29 (P29) programmes. You'll be the person who builds it: designing the control framework, running the IT ICFR assurance programme, and making sure our IT general controls can stand up to external audit scrutiny. WHAT YOU'LL DO * Design, document, test, and oversee remediation of IT General Controls (ITGCs), automated controls, and key system-generated financial reports across SumUp's ICFR and P29 programmes * Build and maintain a complete IT risk and control matrix (RCM) covering all in-scope control domains, and produce audit-quality evidence packs * Act as the primary point of contact between the Internal Controls team and SumUp's Engineering and IT functions, coordinating evidence, managing auditor requests, and tracking deficiencies through to remediation * Identify and implement automation opportunities across the controls lifecycle, including evidence collection workflows, access review sampling, and change management evidence extraction * Advise the business on IT risk identification and control design to support compliance and broader risk management requirements YOU'LL BE GREAT FOR THIS ROLE IF… * Strong hands-on experience in IT audit, ITGC testing, or technology risk,  whether from an internal or external audit background * Solid knowledge of IT General Controls domains: logical access, change management, computer operations, and SDLC * Familiarity with ICFR, SOX, or equivalent regulatory frameworks, including experience managing IT PBC (Prepared by Client) requests with external auditors * A good understanding of IT risk and the ability to link IT controls activities with broader assurance programmes (such as ISO and other existing frameworks) to avoid duplication and drive efficiency  * Ability to document and maintain risk and control matrices to a standard that holds up under audit scrutiny * Comfort working across multi-jurisdictional environments and influencing technical teams without direct authority * Intellectual curiosity about automation and AI — and a genuine interest in applying both to make controls programmes more efficient WHY YOU SHOULD JOIN SUMUP * 🌎 Opportunity to work with a truly global, multicultural team from our central Covent Garden location, wrapped in historic charm and modern flair. This involves an office-first setup * 🌈 Commitment to Diversity and Inclusion: be part of a workplace that values and promotes diversity, fostering an inclusive environment where everyone's perspectives are respected and embraced * 🚀 Enrolment onto our Virtual Stock Option programme: you will own a stake in SumUp's future success * 🏖 Generous time off: enjoy 28 days of paid leave, plus bank holidays and special leaves * 📚 A dedicated annual L&D budget for attending conferences and/or advancing your career through further education * 🏥 Health matters: private health insurance, including optical and dental * 🚗 Life made easier: salary-sacrifice commuter benefits via Gogeta * 💼 Financial security: retirement scheme (SumUp matches 7% when you contribute 5%) * 🛡 Peace of mind: life insurance from MetLife for 2× your salary * 🌴 Break4me: 1-month sabbatical after 3 years of service * 🔗 Referral Bonus: earn additional rewards by referring talented individuals to join the SumUp team ABOUT SUMUP Be empowered to do more that matters. At SumUp, we're on a mission to empower small businesses across the globe by providing simple and affordable tools that allow them to thrive. Today, over 4 million businesses in 37 markets rely on SumUp as their financial partner to manage payments, finance and customer relationships. Our commitment to small businesses is reflected in our diverse team of over 3,000 SumUppers from over 90 nationalities, united by global collaboration and an innovative mindset. Our core values lay the foundation for who we are and what we stand for, shaping our work culture and driving our success. We foster inclusivity and a continuous learning culture, providing a safe space for personal and professional growth. Our differences make us unique and strong as we strive to create an environment where everyone belongs and feels supported, no matter how they identify. SumUp is proud to be an Equal Employment Opportunity employer, actively seeking and embracing diversity in our workforce. We don't make hiring or employment decisions based on race, colour, religion or religious belief, ethnic or national origin, nationality, sex, gender, gender identity, sexual orientation, disability, age or any other basis protected by applicable laws or prohibited by company policy. Our commitment extends beyond recruitment to creating a safe and respectful workplace where harassment of any form is strictly prohibited. Discover more about our culture and opportunities on our careers website, and follow our journey on LinkedIn, Instagram, and TikTok. Job Application Tip We recognise that candidates feel they need to meet 100% of the job criteria in order to apply for a job. Please note that this is only a guide. If you don’t tick every box, it’s ok too because it means you have room to learn and develop your career at SumUp.